Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 07 May 2022 21:45:39 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 263824] genet(4): Driver interface may overwrite memory in a consecutive memory copy operations when parsing TX packet
Message-ID:  <bug-263824-7501-n9HMosId3F@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-263824-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-263824-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263824

Mike Karels <karels@freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|Open                        |In Progress

--- Comment #3 from Mike Karels <karels@freebsd.org> ---
Had you set the value of the sysctl hw.genet.tx_hdr_min to 0?  I couldn't d=
rive
the code through the block with the bug without doing that.  Even with that=
, I
could only do it with a random failure in M_PREPEND.  However, I tested your
fix successfully and demonstrated the problem without it.

--=20
You are receiving this mail because:
You are on the CC list for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-263824-7501-n9HMosId3F>